← Voltar para CVEs

CVE-2011-0330

N/A

Descricao

The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value, as demonstrated by a value that triggers disclosure of information about installed software.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/21/2011

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

dell:dellsystemlite.scanner_activex_control

Fraquezas (CWE)

CWE-264

Referencias

http://secunia.com/advisories/42880(PSIRT-CNA@flexerasoftware.com)

http://secunia.com/secunia_research/2011-11/(PSIRT-CNA@flexerasoftware.com)

http://www.securityfocus.com/bid/46443(PSIRT-CNA@flexerasoftware.com)

http://www.securitytracker.com/id?1025094(PSIRT-CNA@flexerasoftware.com)

http://secunia.com/advisories/42880(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/secunia_research/2011-11/(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/46443(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1025094(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.